Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: RoA90rkXieTpmaPYlzso5UjZz/z/v35qIHRFzWtnFuA=
Subject key identifier: 3D:9F:F3:12:C9:AA:A2:C7:FD:D9:3A:1E:39:3A:43:9F:EC:77:2D:39
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 019D26289FABC1856753D7F589C10973F374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 0BF6
Signing time: Wed 25 Mar 2026 18:01:29 +0000
Manifest this update: Wed 25 Mar 2026 18:01:29 +0000
Manifest next update: Thu 26 Mar 2026 18:01:29 +0000
Files and hashes: 1: A4IQPKMY2VOtogijBuwLkSr_g5k.asa (hash: tj8IYv9LlTx0IXapf0CTWli/SmSES+YcjhcSCMOAsus=)
2: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: UxQLRXO4+xtsc2pKKe2dN6jwrhCw57oK36YtlBcdeHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:9f:ab:c1:85:67:53:d7:f5:89:c1:09:73:f3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Mar 25 18:01:29 2026 GMT
Not After : Mar 26 18:01:29 2026 GMT
Subject: CN=3d9ff312c9aaa2c7fdd93a1e393a439fec772d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:db:9a:83:14:0d:80:43:6f:20:10:fb:5e:
51:a1:e7:43:c3:f7:65:9e:b7:a9:cb:6b:d7:c0:36:
09:5d:60:66:ff:66:0a:ce:8f:d2:47:0b:09:98:da:
4b:d1:89:57:84:d8:b4:a0:d6:ce:94:65:4b:43:14:
b3:00:71:d0:83:c3:be:16:d3:4e:f6:0a:69:46:52:
5f:49:33:c2:a8:1a:5b:10:b6:29:4f:a1:d6:b0:12:
aa:95:66:97:d0:82:9d:08:c7:44:37:89:ed:44:0b:
9f:ee:17:40:2f:1d:90:1a:7f:aa:d5:e8:d1:24:38:
a9:ae:98:65:5a:d0:df:17:9e:71:37:82:aa:fb:a7:
77:51:4c:df:c9:bf:e5:83:ac:61:85:58:3f:b1:85:
2b:02:60:64:85:26:41:83:c9:b2:ea:7e:0c:5d:db:
ca:f8:37:91:50:0f:d9:06:3e:8a:81:cc:11:bd:9e:
c9:26:03:99:06:db:74:0f:a9:f7:8d:f4:1b:a8:2e:
5b:13:cf:f7:87:dc:df:88:81:51:9f:23:cf:8b:f5:
bf:b4:13:3f:92:0d:93:10:95:1c:f7:47:7f:1c:b5:
fb:7e:75:86:44:a5:84:3f:dc:57:32:49:80:58:b8:
99:0a:36:56:7d:c9:6f:04:1d:4d:b3:98:7b:fa:35:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9F:F3:12:C9:AA:A2:C7:FD:D9:3A:1E:39:3A:43:9F:EC:77:2D:39
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3f:c9:58:1d:a4:6e:9b:a7:9e:8e:44:77:8e:6b:ab:49:15:
31:5b:79:40:be:35:82:cb:51:f9:b5:06:c4:4c:fd:0d:59:50:
8f:35:b4:0a:aa:5e:bf:a5:08:95:c1:ce:27:eb:24:70:6f:37:
74:dc:6b:31:72:e9:5c:58:88:73:e8:ef:07:e9:50:24:55:60:
7e:df:02:10:62:74:8b:a5:11:e5:2b:5f:fc:d1:f8:4b:30:39:
af:e2:68:44:8a:4b:51:09:18:b9:87:8b:3f:dc:3c:27:32:85:
7b:f9:29:44:c4:67:7e:c9:66:6b:58:5a:fe:7b:5f:24:4f:a5:
4a:0f:5a:98:d0:21:4e:a0:b8:a6:78:9b:d9:e1:aa:c0:9a:08:
34:02:b5:3e:47:bf:4c:8d:ca:f8:74:61:22:b4:2d:71:1f:2f:
21:25:30:c9:62:47:51:2b:dc:6a:9e:f1:ba:47:cf:52:62:00:
2e:36:2b:f8:73:f3:cd:4a:72:82:30:e0:d2:55:4e:14:2c:8d:
0b:a7:0b:a8:52:54:c3:54:cf:61:a5:12:a4:20:fc:95:61:fb:
b9:ac:3c:1b:2b:78:fe:b1:b4:bb:ae:fc:8f:ff:eb:fa:71:bd:
9a:a6:a0:2a:83:32:49:20:34:f5:e2:f9:00:9a:b7:89:ad:ac:
46:56:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:34 2026 by rpki-client